Skip to content

Validation only: repair the three remaining dependency PRs - #255

Closed
Hazzng wants to merge 13 commits into
mainfrom
chore/dependency-fixes-proof-20261014
Closed

Hazzng wants to merge 13 commits into
mainfrom
chore/dependency-fixes-proof-20261014

Conversation

@Hazzng

@Hazzng Hazzng commented Oct 14, 2026 •

Copy link
Copy Markdown
Owner

Validation only; do not merge.

This branch contains exactly the combined repairs in #252 (including #246 and #248) plus one temporary workflow. The workflow runs pnpm check, pnpm security:audit, and pnpm verify:architecture sequentially on a fresh GitHub-hosted runner. No tests, assertions, or timeouts are relaxed. The temporary workflow will not enter main; this draft PR will be closed after its evidence is collected.


Summary by cubic

Combines the repairs for the three open dependency PRs (@types/node, Vitest, Biome) and adds a temporary workflow to validate them on a fresh runner. This branch is proof-only and will not be merged; the workflow is dropped and the PR closed once the evidence is collected.

Dependency repairs

  • @types/node in clients/typescript stays on Node 22 (^22.20.5) rather than accepting the Dependabot major bump to Node 26; Dependabot now ignores major updates for that package.
  • Vitest in clients/typescript is upgraded from 3.2.6 to 5.0.3, with tests reflowed for the new option API, maxWorkers: 2 added to the Vitest config, and the event-loop stall test reworked to synchronize a real stall with native perf_hooks sampling via fake timers and expect.poll.
  • Biome is upgraded from 1.9 to 2.5.15, with the config migrated to the 2.x schema (assist actions, preset: recommended, includes), imports sorted across the repo, and --error-on-warnings added to lint scripts.

Validation workflow

  • The temporary .github/workflows/dependency-validation.yml runs pnpm check, pnpm security:audit, and pnpm verify:architecture sequentially on a fresh GitHub-hosted runner with no relaxed tests, assertions, or timeouts.

Written for commit c7dff56. Summary will update on new commits.

View guided diff Turn on auto-fix

dependabot Bot and others added 11 commits October 13, 2026 23:49
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.19 to 26.6.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.6 to 5.0.3.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 1.9.4 to 2.5.15.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.15
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: d6385800-eea9-49f0-b899-ca5b4168f1b5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Hazzng Hazzng closed this Oct 14, 2026
@Hazzng
Hazzng deleted the chore/dependency-fixes-proof-20261014 branch October 14, 2026 01:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant